CVE-2016-0889

EPSS 1.71%
Veröffentlicht 15.04.2016 14:59:01
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle security_alert@emc.com
CVE-Watchlists
Login
Unerledigt
Login

An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to write to arbitrary files via a crafted pathname.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Dell ≫ Emc Unisphere SwPlatformvmax Version <= 8.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.71%	0.815

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://seclists.org/bugtraq/2016/Apr/83

Vendor Advisory

http://www.securitytracker.com/id/1035580

https://nvd.nist.gov/vuln/detail/CVE-2016-0889

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-0889

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-0889

EUVD